Traffic Trace Info
DumpFile: 201201091400.dump
FileSize: 2252.32MB
Id: 201201091400
StartTime: Mon Jan 9 14:00:00 2012
EndTime: Mon Jan 9 14:15:01 2012
TotalTime: 900.88 seconds
TotalCapSize: 1762.01MB CapLen: 96 bytes
# of packets: 32132537 (20615.48MB)
AvgRate: 191.99Mbps stddev:55.91M
IP flow (unique src/dst pair) Information
# of flows: 1831646 (avg. 17.54 pkts/flow)
Top 10 big flow size (bytes/total in %):
3.8% 1.9% 1.6% 1.5% 1.4% 1.1% 0.9% 0.9% 0.8% 0.8%
IP address Information
# of IPv4 addresses: 1416271
Top 10 bandwidth usage (bytes/total in %):
35.7% 6.2% 4.1% 4.0% 3.9% 3.2% 3.0% 2.5% 2.1% 2.0%
# of IPv6 addresses: 4625
Top 10 bandwidth usage (bytes/total in %):
26.8% 22.3% 7.0% 6.9% 6.8% 6.8% 4.8% 3.9% 3.5% 3.5%
Packet Size Distribution (including MAC headers)
![[packet size distribution]](201201091400.pktlen.png)
detailed numbers
[ 32- 63]: 8570712
[ 64- 127]: 8225181
[ 128- 255]: 956104
[ 256- 511]: 514981
[ 512- 1023]: 594427
[ 1024- 2047]: 13271132
Protocol Breakdown
![[protocol breakdown chart]](201201091400.png)
protocol packets bytes bytes/pkt
------------------------------------------------------------------------
total 32132537 (100.00%) 21616900886 (100.00%) 672.74
ip 31904144 ( 99.29%) 21525703290 ( 99.58%) 674.70
tcp 26272832 ( 81.76%) 19694207099 ( 91.11%) 749.60
http(s) 11451650 ( 35.64%) 15697039389 ( 72.61%) 1370.72
http(c) 8139534 ( 25.33%) 1134953124 ( 5.25%) 139.44
squid 166610 ( 0.52%) 135779621 ( 0.63%) 814.95
smtp 54515 ( 0.17%) 14379869 ( 0.07%) 263.78
ftp 19090 ( 0.06%) 1381375 ( 0.01%) 72.36
pop3 1413 ( 0.00%) 178614 ( 0.00%) 126.41
imap 1701 ( 0.01%) 168561 ( 0.00%) 99.10
telnet 743 ( 0.00%) 81996 ( 0.00%) 110.36
ssh 74909 ( 0.23%) 11538345 ( 0.05%) 154.03
dns 60629 ( 0.19%) 5578167 ( 0.03%) 92.00
bgp 607 ( 0.00%) 94382 ( 0.00%) 155.49
napster 115 ( 0.00%) 7717 ( 0.00%) 67.10
realaud 63 ( 0.00%) 4641 ( 0.00%) 73.67
rtsp 4915 ( 0.02%) 4006045 ( 0.02%) 815.07
icecast 1166 ( 0.00%) 578849 ( 0.00%) 496.44
hotline 63 ( 0.00%) 3976 ( 0.00%) 63.11
other 6295107 ( 19.59%) 2688432308 ( 12.44%) 427.07
udp 3261865 ( 10.15%) 1224480794 ( 5.66%) 375.39
dns 441228 ( 1.37%) 109708593 ( 0.51%) 248.64
realaud 7 ( 0.00%) 1166 ( 0.00%) 166.57
halflif 863 ( 0.00%) 53945 ( 0.00%) 62.51
starcra 151 ( 0.00%) 27305 ( 0.00%) 180.83
everque 1550 ( 0.00%) 998656 ( 0.00%) 644.29
unreal 10 ( 0.00%) 1058 ( 0.00%) 105.80
quake 18 ( 0.00%) 2111 ( 0.00%) 117.28
cuseeme 8 ( 0.00%) 600 ( 0.00%) 75.00
other 2817887 ( 8.77%) 1113665568 ( 5.15%) 395.21
icmp 1476343 ( 4.59%) 121638404 ( 0.56%) 82.39
ipip 186 ( 0.00%) 20407 ( 0.00%) 109.72
ipsec 7672 ( 0.02%) 2086960 ( 0.01%) 272.02
ip6 877898 ( 2.73%) 481982526 ( 2.23%) 549.02
other 7348 ( 0.02%) 1287100 ( 0.01%) 175.16
frag 623 ( 0.00%) 540718 ( 0.00%) 867.93
ip6 228393 ( 0.71%) 91197596 ( 0.42%) 399.30
tcp6 123805 ( 0.39%) 50759321 ( 0.23%) 409.99
http(s) 7062 ( 0.02%) 7378427 ( 0.03%) 1044.81
http(c) 49034 ( 0.15%) 4115635 ( 0.02%) 83.93
smtp 96 ( 0.00%) 51775 ( 0.00%) 539.32
ftp 109 ( 0.00%) 14305 ( 0.00%) 131.24
dns 363 ( 0.00%) 64583 ( 0.00%) 177.91
bgp 85 ( 0.00%) 14393 ( 0.00%) 169.33
other 67056 ( 0.21%) 39120203 ( 0.18%) 583.40
udp6 68748 ( 0.21%) 27435318 ( 0.13%) 399.07
dns 41502 ( 0.13%) 11283223 ( 0.05%) 271.87
starcra 1 ( 0.00%) 97 ( 0.00%) 97.00
everque 2 ( 0.00%) 204 ( 0.00%) 102.00
unreal 1 ( 0.00%) 117 ( 0.00%) 117.00
other 27242 ( 0.08%) 16151677 ( 0.07%) 592.90
icmp6 22078 ( 0.07%) 3225947 ( 0.01%) 146.12
ip6 84 ( 0.00%) 11462 ( 0.00%) 136.45
pim6 30 ( 0.00%) 4080 ( 0.00%) 136.00
other6 13648 ( 0.04%) 9761468 ( 0.05%) 715.23
tcpdump file: 201201091400.dump.gz (755.68 MB)